Extended Detection and Response (XDR)
- •
def
- •
an evolution of Endpoint Detection and Response (EDR) that extends detection beyond just the endpoint, adding network-based detection and correlating endpoint, network, and cloud data together
- •
- •
benefit
- •
improves missed detections, reduces false positives, and speeds up investigation, since real attacks often span more than just the endpoint
- •
- •
- •